Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/tdaCTk5QRVdicj0QuaDdSd6pJjo.roa
File: tdaCTk5QRVdicj0QuaDdSd6pJjo.roa (raw, json)
Hash identifier: 7xOTzrfWW4EN0rCBfaTQHYFLvtO6j6UDwvQylOWAlk4=
Subject key identifier: B5:D6:82:4E:4E:50:45:57:62:72:3D:10:B9:A0:DD:49:DE:A9:26:3A
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019CBC6C19E095EE87B6473194F100B6763D
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/tdaCTk5QRVdicj0QuaDdSd6pJjo.roa
Signing time: Thu 05 Mar 2026 05:15:27 +0000
ROA not before: Thu 05 Mar 2026 05:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201738
IP address blocks: 109.238.86.0/24 maxlen: 24
109.238.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bc:6c:19:e0:95:ee:87:b6:47:31:94:f1:00:b6:76:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Mar 5 05:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b5d6824e4e50455762723d10b9a0dd49dea9263a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:60:8d:8a:e5:5a:32:1b:06:e7:64:a1:6e:
4c:98:5e:53:fb:32:48:58:d8:54:c5:60:e2:df:9b:
f3:7c:56:cc:89:4c:98:2b:71:14:d8:d5:c3:96:12:
49:9f:d6:ee:19:33:43:ea:f6:f0:bf:37:28:b2:cd:
40:e8:20:f5:b8:6b:3f:eb:82:2e:30:94:18:2a:b2:
37:47:0c:64:46:bd:69:09:a6:da:40:cf:f7:8b:a0:
18:05:59:c3:c8:f1:17:19:5c:db:8a:9b:79:1c:d4:
84:af:a2:37:3d:aa:93:54:cb:c0:d9:c8:9e:79:17:
5f:74:4b:ef:f9:16:be:64:14:7c:8f:b2:7e:7b:82:
c9:ca:2e:a7:5b:9c:1f:1d:73:44:98:38:fb:e8:e8:
66:8f:03:97:98:a6:db:fc:60:ad:28:51:8d:fc:9b:
cd:da:29:b6:5a:54:55:6b:8a:78:fd:49:6d:d8:f1:
6d:e1:d6:f9:65:91:f7:48:5d:c3:fa:eb:d1:e6:1f:
34:5c:78:87:05:11:1f:9a:89:fa:0d:90:fe:a4:b1:
6a:d0:5a:23:5e:f8:fb:3a:39:9c:cf:79:d6:6c:3f:
d5:bb:81:bf:03:8c:d4:25:d8:1f:11:90:99:d2:b2:
56:93:0b:94:58:46:e9:4d:ee:be:53:a3:a1:99:8a:
4c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D6:82:4E:4E:50:45:57:62:72:3D:10:B9:A0:DD:49:DE:A9:26:3A
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/tdaCTk5QRVdicj0QuaDdSd6pJjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.238.86.0/23
Signature Algorithm: sha256WithRSAEncryption
c2:c6:97:a3:97:27:22:5a:a7:90:89:a3:1f:1e:c6:1f:6b:4b:
df:3c:54:86:3d:c4:1c:f7:9c:67:48:7f:6e:26:6d:db:1f:9e:
7d:b1:4d:fa:4e:5d:3f:82:e9:1a:f3:b8:3d:71:eb:85:44:a1:
69:5c:b0:c3:c7:67:09:02:df:84:57:02:97:b5:18:fb:85:21:
f3:21:1a:b2:95:a9:2d:59:2c:3c:1b:c2:59:05:ae:2e:32:4e:
76:57:8e:e7:3e:5a:fa:d4:4b:ed:37:e3:42:74:33:a7:b6:e8:
a6:ad:7f:4d:8c:72:71:86:f0:d6:2d:4f:f2:db:60:64:5d:b7:
d3:11:fe:b1:aa:ec:96:58:1d:f8:7f:b0:aa:fe:31:57:6f:51:
3e:19:a4:c9:06:11:3e:bd:56:5f:f9:6f:18:d3:31:1a:af:dd:
96:0e:77:54:57:34:2b:63:76:89:7c:4f:d5:dd:8c:d1:39:8c:
49:c3:8d:5a:7b:35:c5:71:5b:3b:0f:02:a0:83:31:d6:71:95:
d1:01:34:e9:bb:58:ba:32:b3:50:56:65:6b:c7:95:c7:fb:0c:
14:d3:d2:77:d5:51:05:33:84:71:e8:8f:2a:c5:29:e1:dd:63:
5f:9f:2d:b1:36:d4:ac:89:fb:cd:91:6b:7f:5d:1e:ef:13:41:
58:8b:8d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 5 23:39:06 2026 by rpki-client